Convolutional Entanglement Distillation 

Mark M. Wilde, Hari Krovi, and Todd A. Brun 



Abstract — We develop a theory of entanglement distillation 
that exploits a convolutional coding structure. We provide a 
method for converting an arbitrary classical binary or quaternary 
convolutional code into a convolutional entanglement distillation 
protocol. The imported classical convolutional code does not have 
to be dual-containing or self-orthogonal. The yield and error- 
correcting properties of such a protocol depend respectively on 
the rate and error-correcting properties of the imported classical 
convolutional code. A convolutional entanglement distillation 
protocol has several other benefits. Two parties sharing noisy 
ebits can distill noiseless ebits "online" as they acquire more 
noisy ebits. Distillation yield is high and decoding complexity 
is simple for a convolutional entanglement distillation protocol. 
Our theory of convolutional entanglement distillation reduces the 
problem of finding a good convolutional entanglement distillation 
protocol to the well-established problem of finding a good 
classical convolutional code. 

Index Terms — quantum convolutional codes, convolutional 
entanglement distillation, quantum information theory, 
entanglement-assisted quantum codes, catalytic codes 

I. Introduction 

The theory of quantum error correction |fl~), flU > EL GL 
plays a prominent role in the practical realization and 
engineering of quantum computing and communication de- 
vices. The first quantum error-correcting codes [Q], Q, J3], 
J3 are strikingly similar to classical block codes |6) in their 
operation and performance. Quantum error-correcting codes 
restore a noisy, decohered quantum state to a pure quantum 
state. A stabilizer H quantum error-correcting code appends 
ancilla qubits to qubits that we want to protect. A unitary 
encoding circuit rotates the global state into a subspace of 
a larger Hilbert space. This highly entangled, encoded state 
corrects for local noisy errors. Figure [T] illustrates the above 
procedures for encoding a stabilizer code. A quantum error- 
correcting code makes quantum computation and quantum 
communication practical by providing a way for a sender and 
receiver to simulate a noiseless qubit channel given a noisy 
qubit channel that has a particular error model. 

The stabilizer theory of quantum error correction allows 
one to import some classical binary or quaternary codes for 
use as a quantum code. The only "catch" when importing 
is that the classical code must satisfy the dual-containing or 
self-orthogonality constraint. Researchers have found many 
examples of classical codes satisfying this constraint [5], but 
most classical codes do not. 

Brun, Devetak, and Hsieh extended the standard stabi- 
lizer theory of quantum error correction by developing the 
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entanglement-assisted stabilizer formalism Q, J5). They in- 
cluded entanglement as a resource that a sender and receiver 
can exploit for a quantum error-correcting code. They provided 
a "direct-coding" construction in which a sender and receiver 
can use ancilla qubits and ebit^jin a quantum code. Gottesman 
later showed that their construction is optimal [9| — it gives 
the minimum number of ebits required for the entanglement- 
assisted quantum code. The benefit of including shared en- 
tanglement is that one can import an arbitrary classical bi- 
nary or quaternary code for use as an entanglement-assisted 
quantum code. Another benefit of using shared entanglement, 
in addition to being able to import an arbitrary classical 
linear code, is that the performance of the original classical 
code determines the performance of the resulting quantum 
code. The entanglement-assisted stabilizer formalism thus is a 
significant and powerful extension of the stabilizer formalism. 

The goal of entanglement distillation resembles the goal 
of quantum error correction flOl . ifTTl . An entanglement 
distillation protocol extracts noiseless, maximally-entangled 
ebits from a larger set of noisy ebits. A sender and receiver 
can use these noiseless ebits as a resource for several quantum 
communication protocols fl2l . fl3l . 

Bennett et al. showed that a strong connection exists be- 
tween quantum error-correcting codes and entanglement distil- 
lation and demonstrated a method for converting an arbitrary 
quantum error-correcting code into a one-way entanglement 
distillation protocol |11|. A one-way entanglement distillation 
protocol utilizes one-way classical communication between 
sender and receiver to carry out the distillation procedure. 
Shor and Preskill improved upon Bennett et al.'s method by 
avoiding the use of ancilla qubits and gave a simpler method 
for converting an arbitrary CSS quantum error-correcting 
code into an entanglement distillation protocol |14|. Nielsen 
and Chuang showed how to convert a stabilizer quantum 
error-correcting code into a stabilizer entanglement distillation 
protocol |15|. Luo and Devetak then incorporated shared 
entanglement to demonstrate how to convert an entanglement- 
assisted stabilizer code into an entanglement-assisted entangle- 
ment distillation protocol fl6l . All of the above constructions 
exploit the relationship between quantum error correction and 
entanglement distillation — we further exploit the connection in 
this paper by forming a convolutional entanglement distillation 
protocol. 

Several authors have recently contributed toward a theory of 
quantum convolutional codes ifTTIl . 0~8), fl9l . [20|. Quantum 
convolutional codes are useful in a communication context 
where a sender has a large stream of qubits to send to a 
receiver. Quantum convolutional codes are similar to classical 
convolutional codes in their operation and performance |18|, 

'An ebit is a nonlocal bipartite Bell state |<&+) = (|00) + |11>) /\/2. 
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[20 1 . Classical convolutional codes have some advantages over 
classical block codes such as superior code rates and lower 
decoding complexity ll2D . Their quantum counterparts enjoy 
these same advantages over quantum block codes ll20l . 

The development of quantum convolutional codes has been 
brief but successful. Chau was the first to construct some 
quantum convolutional codes ll22ll . 11231 . though some authors 
[20 1 argue that his construction is not a true quantum con- 
volutional code. Several authors have established a working 
theory of quantum convolutional coding based on the stabilizer 
formalism and classical self-orthogonal codes over the finite 
field F 4 El, ED, ED, GO). Others have also provided a 
practical way for realizing "online" encoding and decoding 
circuits for quantum convolutional codes ifTTl . £l8|, [24], [25|. 
These successes have led to a theory of quantum convolutional 
coding which is useful but not complete. We add to the 
usefulness of the quantum convolutional theory by considering 
entanglement distillation and shared entanglement. 

In this paper, our main contribution is a theory of con- 
volutional entanglement distillation. Our theory allows us to 
import the entirety of classical convolutional coding theory 
for use in entanglement distillation. The task of finding a 
good convolutional entanglement distillation protocol now 
becomes the well-established task of finding a good classical 
convolutional code. 

We begin in Section [Hi] by showing how to construct a con- 
volutional entanglement distillation protocol from an arbitrary 
quantum convolutional code. We translate earlier protocols 
lfl4l . |fT31 for entanglement distillation of a block of noisy ebits 
to the convolutional setting. Our convolutional entanglement 
distillation protocol possesses several benefits — it has a higher 
distillation yield and lower decoding complexity than a block 
entanglement distillation protocol. A convolutional entangle- 
ment distillation protocol has the additional benefit of distilling 
entanglement "online." This online property is useful because 
the sender and receiver can distill entanglement "on the fly" as 
they obtain more noisy ebits. This translation from a quantum 
convolutional code to an entanglement distillation protocol is 
useful because it paves the way for our major contribution. 

Our major advance is a method for constructing a convo- 
lutional entanglement distillation protocol when the sender 
and receiver initially share some noiseless ebits. All prior 
quantum convolutional work requires the code to satisfy the 
restrictive self-orthogonality constraint, and authors performed 
specialized searches for classical convolutional codes that meet 
this constraint ED, ED, ED, ED. We lift this constraint 
by allowing shared noiseless entanglement. The benefit of 
convolutional entanglement distillation with entanglement as- 
sistance is that we can import an arbitrary classical binary 
or quaternary convolutional code for use in a convolutional 
entanglement distillation protocol. The error-correcting prop- 
erties for the convolutional entanglement distillation protocol 
follow directly from the properties of the imported classical 
code. Thus we can apply the decades of research on classical 
convolutional coding theory with many of the benefits of the 
convolutional structure carrying over to the quantum domain. 

We organize our work as follows. In Section [II] we re- 
view the stabilizer theory for quantum error correction and 



entanglement distillation. The presentation of the mathematics 
is similar in style to Refs. [20 j, 0. The stabilizer review 
includes a review of the standard stabilizer theory (Section 
II-A), the entanglement-assisted stabilizer theory (Section 



II-B[ ), convolutional stabilizer codes (Section |II-C| l, stabilizer 



entanglement distillation (Section II-Di, and entanglement- 
assisted entanglement distillation (Section |II-E[ >. We provide 
a small contribution in the Appendix — a simple algorithm to 
determine an encoding circuit and the optimal number of ebits 
required for an entanglement-assisted block code. The original 
work [8 1 gave two theorems relevant to the encoding circuit, 
but the algorithm we present here is simpler. In Section [III] 
we show how to convert an arbitrary quantum convolutional 
code into a convolutional entanglement distillation protocol. 



In Section IV we provide several methods and examples for 
constructing convolutional entanglement distillation protocols 
where two parties possess a few initial noiseless ebits. These 
initial noiseless ebits act as a catalyst for the convolutional 



distillation protocol. The constructions in Section IV make it 



possible to import an arbitrary classical binary or quaternary 
convolutional code for use in convolutional entanglement 
distillation. 

II. Review of the Stabilizer Formalism 

A. Standard Stabilizer Formalism for Quantum Block Codes 

The stabilizer formalism exploits elements of the Pauli 
group il in formulating quantum error-correcting codes. The 
set il = {J, X, Y, Z} consists of the Pauli operators: 



I 



X = 



Y = 







Z = 





-1 



n™ = 



(i) 



The above operators act on a single qubit — a state in a two- 
dimensional Hilbert space. Operators in il have eigenvalues 
±1 and either commute or anti-commute. The set il™ consists 
of n-fold tensor products of Pauli operators: 

e^Ax ® • • • ® A n : Vj € {l,...,n}, 
Aj en, tf> £ {0, tt/2, tt, 3tt/2} 

Elements of II™ act on a quantum register of n qubits. We 
occasionally omit tensor product symbols in what follows so 
that A x ■ ■ ■ A^, = Ax <g> • • • <g> An. The n-fold Pauli group il" 
plays an important role for both the encoding circuit and the 
error-correction procedure of a quantum stabilizer code over 
n qubits. 

Let us define an [n, k] stabilizer quantum error-correcting 
code to encode k logical qubits into n physical qubits. The rate 
of such a code is k/n. Its stabilizer S is an abelian subgroup 
of the n-fold Pauli group II™: S C il™. S does not contain the 
operator —I® 11 . The simultaneous +l-eigenspace of the oper- 
ators constitutes the codespace. The codespace has dimension 
2 fc so that we can encode k qubits into it. The stabilizer S has 
a minimal representation in terms of n— k independent genera- 
tors {.gi, ... , g n -k | Vi € {1, . . . ,n - k} , gi £ S}. The gen- 
erators are independent in the sense that none of them is a 
product of any other two (up to a global phase). The operators 
gi , . . . , g n -k function in the same way as a parity check matrix 
does for a classical linear block code. Figure [T] illustrates the 
operation of a stabilizer code. 
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Fig. 1. The operation of a stabilizer code. Thin lines denote quantum 
information and thick lines denote classical information. Slanted bars denote 
multiple qubits. A sender encodes a multi-qubit state \ ip) with the help of some 
ancilla qubits 1 0} . She sends the encoded state over a noisy quantum channel. 
The receiver performs multi-qubit measurements to extract information about 
the errors. He finally performs a recovery operation R to reverse the channel 
error. 




Fig. 2. The operation of an entanglement-assisted quantum error-correcting 
code. The sender encodes quantum information in state with the help of 
local ancilla qubits |0) and her half of a set of shared ebits She then 

sends her qubits over a noisy quantum channel. The channel does not corrupt 
the receiver's half of the set of shared ebits. The receiver performs multi-qubit 
measurements on all of the qubits to diagnose the channel error. He performs 
a recovery unitary R, to reverse the channel error. 



One of the fundamental notions in quantum error correction 
theory is that it suffices to correct a discrete error set with 
support in the Pauli group II" [1|. Suppose that the errors 
affecting an encoded quantum state are a subset £ of the 
Pauli group IT" : £ C 11™. An error E G £ that affects an 
encoded quantum state either commutes or anticommutes with 
any particular element g in S. The error E is correctable if 
it anticommutes with an element g in S. An anticommuting 
error E is detectable by measuring each element g in S and 
computing a syndrome r identifying E. The syndrome is a 
binary vector r with length n — k whose elements identify 
whether the error E commutes or anticommutes with each 
g G S. An error E that commutes with every element g in S 
is correctable if and only if it is in S. It corrupts the encoded 
state if it commutes with every element of S but does not lie in 
S. So we compactly summarize the stabilizer error-correcting 
conditions: a stabilizer code can correct any errors E\, E 2 in £ 
if e\e 2 (£Z (S) or e\e 2 G S where Z (S) is the centralizer 
of S. 



B. Entanglement-Assisted Stabilizer Formalism 

The entanglement-assisted stabilizer formalism extends the 
standard stabilizer formalism by including shared entangle- 
ment [7], [8|. Figure [2] demonstrates the operation of a generic 
entanglement-assisted stabilizer code. 

The advantage of entanglement-assisted stabilizer codes is 
that the sender can exploit the error-correcting properties of an 
arbitrary set of Pauli operators. The sender's Pauli operators 
do not necessarily have to form an abelian subgroup of II™. 
The sender can make clever use of her shared ebits so that the 
global stabilizer is abelian and thus forms a valid quantum 
error-correcting code. 

We review the construction of an entanglement-assisted 
code. Suppose that there is a nonabelian subgroup S C II" 
of size n — k = 2c + s. Application of the fundamental 
theorem of symplectic geometr>rl[26| (Lemma 1 in [7 |) states 
that there exists a minimal set of independent generators 



{Zi,. 



Z s +c, x. 



s+li • • 



( I S | C ) for S with the following 



2 We loosely refer to this theorem as the fundamental theorem of symplectic 
geometry because of its importance in symplectic geometry and in quantum 
coding theory. 



commutation relations: 



[Zi,Zj] =0 
[X h Xj\ =0 
[Xi,Zj] = o 



Vi, j, 
V« + j, 
V*. 



(2) 



The decomposition of S into the above minimal generating 
set determines that the code requires s ancilla qubits and 
c ebits. The code requires an ebit for every anticommuting 
pair in the minimal generating set. The simple reason for this 
requirement is that an ebit is a simultaneous +l-eigenstate 
of the operators {XX, ZZ}. The second qubit in the ebit 
transforms the anticommuting pair {X, Z} into a commuting 
pair {XX, ZZ}. The above decomposition also minimizes the 
number of ebits required for the code (9) — it is an optimal 
decomposition. 

We can partition the nonabelian group S into two sub- 
groups: the isotropic subgroup Si and the entanglement 
subgroup Se- The isotropic subgroup Si is a commuting 
subgroup of S and thus corresponds to ancilla qubits: Si = 
{Zi, . . . , Z s \. The elements of the entanglement subgroup Se 
come in anticommuting pairs and thus correspond to ebits: 



S+l) • 



• i Z s+C , X s+ i, 



, x s+c y 



The two subgroups Si and Se play a role in the error- 
correcting conditions for the entanglement-assisted stabilizer 
formalism. An entanglement-assisted code corrects errors in 
a set £ c IF if for all £a,£ 2 € £, e\e 2 G Si U 

The operation of an entanglement-assisted code is as fol- 
lows. The sender performs an encoding unitary on her un- 
protected qubits, ancilla qubits, and her half of the ebits. 
The unencoded state is a simultaneous +l-eigenstate of the 
following operators: 



Zi,. 
Z s +i\Z\, . 
X s +i \Xi, . 



1 Z s , 

1 Z S + C \Z C , 
, X S+C \X C 



(3) 



The operators to the right of the vertical bars indicate the 
receiver's half of the shared ebits. The encoding unitary 
transforms the unencoded operators to the following encoded 
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operators: 

!Zi,...,Z s , j 

Z S+1 \Z X ,...,Z_ S+C \Z C , \. (4) 

X s +i \X\, . . . , X S+C \X C J 

The sender transmits all of her qubits over the noisy quantum 
channel. The receiver then possesses the transmitted qubits and 
his half of the ebits. He measures the above encoded operators 
to diagnose the error. The last step is to correct for the error. 

We give an example of an entanglement-assisted stabilizer 
code in the Appendix. This example highlights the main 
features of the theory given above. 

The Appendix also gives an original algorithm that deter- 
mines the encoding circuit for the sender to perform. The 
algorithm determines the number of ancilla qubits and the 
number of ebits that the code requires. 

The defined rate of an entanglement-assisted quantum error- 
correcting code is (k — c) /n 0, 0. The authors defined the 
rate in this way to compare entanglement-assisted codes with 
standard quantum error-correcting codes. 

We mention that the rate pair (k/n, c/ri) more properly 
characterizes the rate of an entanglement-assisted code be- 
cause an entanglement-assisted code is a "father" code in the 
sense of Ref. [27 1 . The first number in the pair gives the rate 
of noiseless qubits generated per channel use and the second 
number gives the rate of ebits consumed per channel use. The 
rate pair falls in the two-dimensional capacity region for the 
"father" protocol. The goal of an entanglement-assisted coding 
strategy is for the rate pair to approach the boundary of the 
capacity region as the block length becomes large. 

C. Convolutional Stabilizer Codes 

The block codes reviewed above are useful in quantum 
computing and in quantum communications. The encoding 
circuit for a large block code typically has a high complexity 
although those for modern codes do have lower complexity. 

Quantum convolutional coding theory |17|, |18|, fl9l . Il20l 
offers a different paradigm for coding quantum information. 
The convolutional structure is useful for a quantum commu- 
nication scenario where a sender possesses a stream of qubits 
to send to a receiver. The encoding circuit for a quantum 
convolutional code has a much lower complexity than an 
encoding circuit needed for a large block code. It also has a 
repetitive pattern so that the same physical devices or the same 
routines can manipulate the stream of quantum information. 

Quantum convolutional stabilizer codes borrow heavily 
from the structure of their classical counterparts ifTTll . |18|, 
020, [20|. Quantum convolutional codes are similar because 
some of the qubits feed back into a repeated encoding unitary 
and give the code a memory structure like that of a clas- 
sical convolutional code. The quantum codes feature online 
encoding and decoding of qubits. This feature gives quantum 
convolutional codes both their low encoding and decoding 
complexity and their ability to correct a larger set of errors 
than a block code with similar parameters. 

We first review some preliminary mathematics and follow 
with the definition of a quantum convolutional stabilizer code 



lfT8l . GUI . We end this section with a brief discussion of 
encoding circuits for quantum convolutional codes. 

A quantum convolutional stabilizer code acts on a Hilbert 
space H that is a countably infinite tensor product of two- 
dimensional qubit Hilbert spaces {H-i} ie i+ where 

oo 

H = (g)H t . (5) 

i=0 

and Z + = {0,1,...}. A sequence A of Pauli matrices 
{ A i}iez,+ > where 

OO 

A = (g) At, (6) 

i=0 

can act on states in TL. Let H denote the set of all Pauli 
sequences. The support supp(A) of a Pauli sequence A is the 
set of indices of the entries in A that are not equal to the 
identity. The weight of a sequence A is the size |supp (A)| of 
its support. The delay del(A) of a sequence A is the smallest 
index for an entry not equal to the identity. The degree deg(A) 
of a sequence A is the largest index for an entry not equal to 
the identity. E.g., the following Pauli sequence 

I X I Y Z I I ■■■ , (7) 

has support {1,3,4}, weight three, delay one, and degree 
four. A sequence has finite support if its weight is finite. Let 
F{U E ) denote the set of Pauli sequences with finite support. 
The following definition for a quantum convolutional code 
utilizes the set F{J\ L ) in its description. 

Definition 1: A rate /c/n-convolutional stabilizer code with 
< k < n is a commuting set Q of all n-qubit shifts of a 
basic generator set Qq. The basic generator set Qq has n — k 
Pauli sequences of finite support: 

So = {GieF(n z+ ):l<i<n-fc}. (8) 

The constraint length v of the code is the maximum degree of 
the generators in Qq. A frame of the code consists of n qubits. 

Remark 1: The above definition requires that all elements 
of Q commute. In Section |TV| we lift the restrictive commuta- 
tive condition when we construct a convolutional entanglement 
distillation protocol with entanglement assistance. 

A quantum convolutional code admits an equivalent defi- 
nition in terms of the delay transform or _D-transform. The 
D-transform captures shifts of the basic generator set Qq. Let 
us define the n-qubit delay operator D acting on any Pauli 
sequence A £ H z as follows: 

D (A) = I® n ® A. (9) 

We can write j repeated applications of D as a power of D: 

D j (A) = 7® in <g> A. (10) 

Let D- 7 (Qq) be the set of shifts of elements of Qq by j. Then 
the full stabilizer Q for the convolutional stabilizer code is 

G= U Di(g ). (11) 

Figure [3] outlines the operation of a convolutional stabilizer 
code. The protocol begins with the sender encoding a stream 
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Fig. 3. An example of a quantum convolutional code. The sender applies the same unitary successively to a stream of information qubits and ancilla qubits. 
The convolutional structure implies that the unitary overlaps some of the same qubits. The sender transmits her qubits as soon as the unitary finishes processing 
them. The noisy quantum channel corrupts the transmitted qubits. The receiver performs overlapping multi-qubit measurements to diagnose channel errors 
and corrects for them. The receiver performs an online decoding circuit to recover the sender's original stream of information qubits. 



of qubits with an online encoding circuit such as that given in 
ll25l . The encoding circuit is "online" if it acts on a few blocks 
of qubits at a time. The sender transmits a set of qubits as 
soon as the first unitary finishes processing them. The receiver 
measures all the generators in Q and corrects for errors as 
he receives the online encoded qubits. He finally decodes the 
encoded qubits with a decoding circuit. The qubits decoded 
from this convolutional procedure should be error free and 
ready for quantum computation at the receiving end. 

A finite-depth circuit maps a Pauli sequence with finite 
weight to one with finite weight 1 18 1. It does not map a Pauli 
sequence with finite weight to one with infinite weight. This 
property is important because we do not want the decoding cir- 
cuit to propagate uncorrected errors into the information qubit 
stream BTTl . A finite-depth decoding circuit corresponding to 
the stabilizer Q exists by the algorithm given in 1251 . 

Example 1: Forney et al. provided an example of a rate- 
1/3 quantum convolutional code by importing a particular 
classical quaternary convolutional code lfl9l . |20l . Grassl and 
Rotteler determined a noncatastrophic encoding circuit for 
Forney et al.'s rate-1/3 quantum convolutional code [25 1. The 
basic stabilizer and its first shift are as follows: 



(12) 



The code consists of all three-qubit shifts of the above gener- 
ators. The vertical bars are a visual aid to illustrate the three- 
qubit shifts of the basic generators. The code can correct for 
an arbitrary single-qubit error in every other frame. 

D. Stabilizer Entanglement Distillation without Entanglement 
Assistance 

The purpose of an [n, k] entanglement distillation protocol is 
to distill k pure ebits from n noisy ebits where < k < n [ 10 1, 
irTTl . The yield of such a protocol is k/n. Two parties can then 
use the noiseless ebits for quantum communication protocols. 
Figure |4] illustrates the operation of a block entanglement 
distillation protocol. 

The two parties establish a set of shared noisy ebits in the 
following way. The sender Alice first prepares n Bell states 
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Fig. 4. An example of a block entanglement distillation protocol. A 
sender creates a set of noisy ebits by sending half of a set of Bell states 
through a noisy quantum channel. Both sender and receiver perform multi- 
qubit measurements to diagnose channel error. The sender transmits her 
measurement results to the receiver over a classical communications channel. 
Both perform recovery and decoding operations to obtain a set of noiseless 
ebits. 



|<fr + )®" locally. She sends the second qubit of each pair over 
a noisy quantum channel to a receiver Bob. Let |<f>+) be the 
state |$+)®" rearranged so that all of Alice's qubits are on 
the left and all of Bob's qubits are on the right. The noisy 
channel applies a Pauli error in the error set £ C IT 1 to the 
set of n qubits sent over the channel. The sender and receiver 
then share a set of n noisy ebits of the form (I ® A) |<f>+) 
where the identity I acts on Alice's qubits and A is some 
Pauli operator in £ acting on Bob's qubits. 

A one-way stabilizer entanglement distillation protocol uses 
a stabilizer code for the distillation procedure. Figure [4] high- 
lights the main features of a stabilizer entanglement distillation 
protocol. Suppose the stabilizer S for an [n, k] quantum error- 
correcting code has generators g\,.. . ,g n -k- The distillation 
procedure begins with Alice measuring the n — k generators in 
S. Let {Pi} be the set of the 2™~ fc projectors that project onto 
the 2"~ fe orthogonal subspaces corresponding to the generators 
in S. The measurement projects |<I>+) randomly onto one of 
the i subspaces. Each P; commutes with the noisy operator 
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A on Bob's side so that 

(Pi ® I) (I ® A) |$+) = (I ® A) (Pi <8> 1) |$+) . (13) 

The following important "Bell-state matrix identity" holds for 
an arbitrary matrix M: 

(M®I)|$+) = (I®M T )|$+). (14) 

Then ( p"3j ) is equal to the following: 

(I (8 A) (Pi <g> I) |$+) = (I ® A) (P? ® I) |*+) 

= (I®A)(Pi®Pf)|$+>. (15) 

Therefore each of Alice's projectors Pj projects Bob's qubits 
onto a subspace P^ corresponding to Alice's projected sub- 
space Pi. Alice restores her qubits to the simultaneous +1- 
eigenspace of the generators in S. She sends her measurement 
results to Bob. Bob measures the generators in S. Bob com- 
bines his measurements with Alice's to determine a syndrome 
for the error. He performs a recovery operation on his qubits 
to reverse the error. He restores his qubits to the simultaneous 
+ l-eigenspace of the generators in S. Alice and Bob both 
perform the decoding unitary corresponding to stabilizer S to 
convert their k logical ebits to k physical ebits. 

E. Stabilizer Entanglement Distillation with Entanglement As- 
sistance 

Luo and Devetak provided a straightforward extension of the 
above protocol |16|. Their method converts an entanglement- 
assisted stabilizer code into an entanglement-assisted entan- 
glement distillation protocol. 

Luo and Devetak form an entanglement distillation protocol 
that has entanglement assistance from a few noiseless ebits. 
The crucial assumption for an entanglement-assisted entan- 
glement distillation protocol is that Alice and Bob possess c 
noiseless ebits in addition to their n noisy ebits. The total state 
of the noisy and noiseless ebits is 



{I A ® (A i 



I) B )|^+c) 



(16) 



where I A is the 2" +c x 2 n+c identity matrix acting on Alice's 
qubits and the noisy Pauli operator (A®I) B affects Bob's 
first n qubits only. Thus the last c ebits are noiseless, and 
Alice and Bob have to correct for errors on the first n ebits 
only. 

The protocol proceeds exactly as outlined in the previous 
section. The only difference is that Alice and Bob measure the 
generators in an entanglement-assisted stabilizer code. Each 
generator spans over n + c qubits where the last c qubits are 
noiseless. 

We comment on the yield of this entanglement-assisted 
entanglement distillation protocol. An entanglement-assisted 
code has n — k generators that each have n + c Pauli entries. 
These parameters imply that the entanglement distillation 
protocol produces k + c ebits. But the protocol consumes c 
initial noiseless ebits as a catalyst for distillation. Therefore 
the yield of this protocol is k/n. 



in spirit to that developed in this section, but the mathematics 
and construction are different because we perform distillation 
in a convolutional manner. 

III. Convolutional Entanglement Distillation 
without Entanglement Assistance 

We now show how to convert an arbitrary quantum con- 
volutional code into a convolutional entanglement distillation 
protocol. Figure [5] illustrates an example of a yield- 1/3 con- 
volutional entanglement distillation protocol. The protocol has 
the same benefits as a quantum convolutional code: an online 
decoder with less decoding complexity than a block protocol, 
good error-correcting properties, and higher ebit yield than 
a block protocol. The protocol we develop in this section is 
useful for our major contribution presented in the next section. 

We can think of our protocol in two ways. Our protocol 
applies when a sender Alice and a receiver Bob possess a 
countably infinite number of noisy ebits. Our protocol also 
applies as an online protocol when Alice and Bob begin with a 
finite number of noisy ebits and establish more as time passes. 
The countably infinite and online protocols are equivalent. We 
would actually implement the entanglement distillation proto- 
col in the online manner, but we formulate the forthcoming 
mathematics with the countably infinite description. Each step 
in the protocol does not need to wait for the completion of its 
preceding step if Alice and Bob employ the protocol online. 

The protocol begins with Alice and Bob establishing a set 
of noisy ebits. Alice prepares a countably infinite number of 
Bell states |<1> + ) locally. She sends one half of each Bell state 
through a noisy quantum channel. Alice and Bob then possess 
a state p AB that is a countably infinite number of noisy ebits 



P 



AB where 



P f B - 



i=l 



The state p is equivalent to the following ensemble 

{».i* + >r}. 

In the above, pi is the probability that the state is 



a.) |*+> 



AB 



(17) 



(18) 



, AB 



(19) 



In Section IV we exploit this same idea of using a few 
noiseless ebits as a catalyst for distillation. The idea is similar 



and |<&5>) * s tne state ( 1^ ) ) rearranged so that all 
of Alice's qubits are on the left and all of Bob's are on the 
right. A, S II Z is a Pauli sequence of errors acting on Bob's 
side. These errors result from the noisy quantum channel. I is a 
sequence of identity matrices acting on Alice's side indicating 
that the noisy channel does not affect her qubits. Alice and 
Bob need to correct for a particular error set in order to distill 
noiseless ebits. 

Alice and Bob employ the following strategy to distill 
noiseless ebits. Alice measures the n—k generators in the basic 
set Qo. The measurement operation projects the first n (v + 1) 
ebits (v is the constraint length) randomly onto one of 2™~ fe 
orthogonal subspaces. Alice places the measurement outcomes 
in an (n — k) -dimensional classical bit vector ao. She restores 
her half of the noisy ebits to the simultaneous +l-eigenspace 
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Ebits 




Fig. 5. An example of a convolutional entanglement distillation protocol taken from the quantum convolutional code in Ref. |20|. The code in Ref. |20| has 
rate 1/3 and can correct for single-qubit errors in every other frame. Alice and Bob first measure the operators in the stabilizer for the quantum convolutional 
code. Alice performs conditional unitaries on her qubits to restore them to the +1 eigenspace of the stabilizer code. Alice forwards her measurement results 
to Bob. Bob performs a maximum-likelihood decoding procedure such as Viterbi decoding |28 | to determine the qubit errors. He corrects for these errors. 
He restores his qubits to the +1 eigenspace of the stabilizer code. Alice and Bob both perform online decoding to obtain ebits with yield 1/3. 



of the generators in Go if ao differs from the all-zero vector. 
She sends ao to Bob over a classical communications channel. 
Bob measures the generators in Go and stores the measurement 
outcomes in a classical bit vector b . Bob compares b to a 
by calculating an error vector eo — ao © bo. He corrects for 
any errors that eo can identify. He may have to wait to receive 
later error vectors before determining the full error syndrome. 
He restores his half of the noisy ebits to the simultaneous +1- 
eigenspace of the generators in Go if the bit vector b indicates 
that his logical ebits are not in the +l-space. Alice and Bob 
repeat the above procedure for all shifts D (Go), D 2 (Go), ■ ■ ■ 
of the basic generators in Go- Bob obtains a set £ of classical 
error vectors e^: £ = {e, : i S Z + }. Bob uses a maximum- 
likelihood decoding technique such as Viterbi decoding ||28ll 
or a table-lookup on the error set £ to determine which 
errors occur. This error determination process is a purely 
classical computation. He reverses all errors after determining 
the syndrome. 

The states that Alice and Bob possess after the above 
procedure are encoded logical ebits. They can extract physical 
ebits from these logical ebits by each performing the online 
decoding circuit for the code G- The algorithm outlined in ll25ll 
gives a method for determining the online decoding circuit. 

Example 2: We use the rate- 1/3 quantum convolutional 
code in Example [T] to produce a yield- 1/3 convolutional en- 
tanglement distillation protocol. Alice measures the generators 



in the stabilizer in (12i for every noisy ebit she shares with 
Bob. Alice communicates the result of her measurement of 
the first two generators to Bob. Alice restores the qubits on 
her side to be in the simultaneous +1 -eigenspace of the first 
two generators. Bob measures the same first two generators. 
Alice measures the next two generators, communicates her 
results, etc. Bob compares his results to Alice's to determine 



the error bit vectors. Bob performs Viterbi decoding on the 
measurement results and corrects for errors. He rotates his 
states to the simultaneous +1 -eigenspace of the generators. 
Alice and Bob perform the above procedure in an online 
manner according to Figure [5] Alice and Bob can decode 
the first six qubits after measuring the second two generators. 
They can decode because there is no overlap between the first 
two generators and any two generators after the second two 
generators. They use the circuit from [25 1 in reverse order to 
decode physical ebits from logical ebits. They distill ebits with 
yield 1/3 by using this convolutional entanglement distillation 
protocol. The ebit yield of 1/3 follows directly from the code 
rate of 1/3. 

IV. Convolutional Entanglement Distillation 
with Entanglement Assistance 

The convolutional entanglement distillation protocol that 
we develop in this section operates identically to the one 
developed in the previous section. The measurements, clas- 
sical communication, and recovery and decoding operations 
proceed exactly as Figure [5] indicates. 

The difference between the protocol in this section and the 
previous one is that we now assume the sender and receiver 
share a few initial noiseless ebits. They use these initial ebits 
as a catalyst to get the protocol started. The sender and receiver 
require noiseless ebits for each round of the convolutional 
entanglement distillation protocol. They can use the noiseless 
ebits generated by earlier rounds for consumption in later 
rounds. It is possible to distill noiseless ebits in this way by 
catalyzing the process with a few noiseless ebits. The protocol 
we develop in this section is a more powerful generalization 
of the previous section's protocol. 

The construction in this section allows sender and receiver 
to use an arbitrary set of Paulis for the distillation protocol. 
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The set does not necessarily have to be a commuting set of 
Paulis. The idea is similar in spirit to entanglement-assisted 
quantum error correction Q, 0. 

The implication of the construction in this section is that 
we can import an arbitrary binary or quaternary classical 
convolutional code for use as a quantum convolutional code. 
We explicitly give some examples to highlight the technique 
for importing. The error-correcting properties and yield trans- 
late directly from the properties of the classical convolutional 
code. Thus the problem of finding a good convolutional 
entanglement distillation protocol reduces to that of finding 
a good classical convolutional code. 

We first review some mathematics concerning the commu- 
tative properties of quantum convolutional codes. We then 
present our different constructions for a convolutional entan- 
glement distillation protocol that use entanglement assistance. 

A. Commutative Properties of Quantum Convolutional Codes 

We consider the commutative properties of quantum con- 
volutional codes. We develop some mathematics that leads 
to the important "shifted symplectic product." The shifted 
symplectic product reveals the commutation relations of an 
arbitrary number of shifts of a set of Pauli sequences. All of 
our constructions following this preliminary section exploit the 
properties of the shifted symplectic product. 

We first define the phase-free Pauli group [n z ] on a 
sequence of qubits. Recall that the delay transform Z> in ([9]) 
shifts a Pauli sequence to the right by n. Let us assume for 
now that n = 1. Let II z denote the set of all countably infinite 
Pauli sequences. The set II Z is equivalent to the set of all one- 
qubit shifts of arbitrary Pauli operators: 

H z ={llD i (A i ):A i eIl}. (20) 
Lez J 

We remark that D % (A t ) = {A4 © J®°°). We make this 
same abuse of notation in what follows. We can define the 
equivalence class [ll z ] of phase-free Pauli sequences: 

[n z ] = {(3A l a g n z ,/3 e c, \p\ = 1} . (21) 

We develop a relation between binary polynomials and Pauli 
sequences that is useful for representing the shifting nature of 
quantum convolutional codes. Suppose z (D) and x (D) are 
arbitrary finite-degree and finite-delay polynomials in D over 

Z 2 

z(D)=^2 z i D% i z * e z 2 Vi G Z, (22) 

i 

x(D) = Y^ XiD\ Xl G Z 2 Vi G Z, (23) 

i 

where del (2 (£>)), del(z (£>)), deg(z (£>)), deg(x(D)) < 00. 
Suppose 

u(D) = (z (D),x{D))e(Z 2 (D)) 2 , (24) 

where (Z 2 (D)) 2 indicates the direct product Z 2 (D) xZ 2 (D). 
Let us employ the following shorthand: 

u{D) = {z{D)\x{D)). (25) 



Let TV be a map from the binary polynomials to the Pauli 
sequences, N : (Z 2 (D)) 2 -> II . where 

N(u(D)) = ]JD i (Z Zi X Xi ). (26) 

i 

Let v(D) = (z' (D) \x'{D)) where v(D) G (Z 2 (D)) 2 . The 
map N induces an isomorphism 

[A] : (Z 2 (D)) 2 [n z ] , (27) 

because addition of binary polynomials is equivalent to mul- 
tiplication of Pauli elements up to a global phase: 

[N (u (£>) + v (£>))] = [N (u (£>))] [N (v (D))] . (28) 

The above isomorphism is a powerful way to capture the 
infiniteness and shifting nature of convolutional codes with 
finite-degree and finite-delay polynomials over the binary field 
Z 2 . 

Recall from Definition [T] that a commuting set comprising 
a basic set of Paulis and all their shifts specifies a quantum 
convolutional code. How can we capture the commutation 
relations of a Pauli sequence and all of its shifts? The shifted 
symplectic product 0, where 

: (Z 2 (D)) 2 x (Z 2 (D)) 2 -> Z 2 (D) , (29) 

is an elegant way to do so. The shifted symplectic product 
maps two vectors u (D) and v (D) to a binary polynomial 
with finite delay and finite degree: 

(u v) (D) = z (D^ 1 ) x' (D) - x (D- 1 ) z' (D) . (30) 

The symplectic orthogonality condition originally given in 
Ref. [18 1 inspires the definition for the shifted symplectic 
product. The shifted symplectic product is not a proper sym- 
plectic product because it fails to be alternating [26]. The 
alternating property requires that 

(u v) (£>)=- (v © u) (D) , (31) 

but we find instead that the following holds: 

(u © v) (D) = - (v u) (D- 1 ) . (32) 

Every vector u (D) G Z 2 (D) 2 is self-time-reversal antisym- 
metric with respect to 0: 

(u © u) (D) = -(«©«) (D- 1 ) Vu (£>) G Z 2 (D) 2 . 

(33) 

Every binary vector is also self-time-reversal symmetric with 
respect to © because addition and subtraction are the same 
over Z 2 . We employ the addition convention from now on 
and drop the minus signs. The shifted symplectic product is a 
binary polynomial in D. We write its coefficients as follows: 

(u&v)(D) ^^(m©!;), D\ (34) 

The coefficient (u v) i captures the commutation relations 
of two Pauli sequences for i rt-qubit shifts of one of the 
sequences: 

N(u(D))D l (N(v(D))) = 

(_!)(«©"). D i (TV (v (£>))) (u (£>)) . (35) 
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Thus two Pauli sequences N (u (D)) and N (v (D)) commute 
for all shifts if and only if the shifted symplectic product 
(u v) (D) vanishes. 

The next example highlights the main features of the shifted 
symplectic product and further emphasizes the relationship 
between Pauli commutation and orthogonality of the shifted 
symplectic product. 

Example 3: Consider two sets of binary polynomials: 

zi(D) = D, x x (D) = l + D 3 , 
z 2 (D) = l + D, x 2 {D)=D 3 , 

We form vectors u (D) and v (D) from the above polynomials 
where 



u(D) = ( Zl (D) | Xl (£>)), 
v(D) = (z 2 (D) | i 2 (U)). 



(36) 



The isomorphism N maps the above polynomials to the 
following Pauli sequences: 



N(u(D)) = (...\I\X\Z\I\X\I\...), 
N(v{D)) = (-..\I\Z\Z\I\X\I\---). 



(37) 



The vertical bars between every Pauli in the sequence indicate 
that we are considering one-qubit shifts. We determine the 
commutation relations of the above sequences by inspection. 
N (u (D)) anticommutes with a shift of itself by one or two 
to the left or right and commutes with all other shifts of 
itself. N (v (D)) anticommutes with a shift of itself by two or 
three to the left or right and commutes with all other shifts of 
itself. N(u(D)) anticommutes with N (v (D)) shifted to the 
left by one or two, with the zero-shifted N (v (D)), and with 
iV [v (D)) shifted to the right by two or three. The following 
shifted symplectic products give us the same information: 



(t»0«) (D) = D- 2 
(v © v) (D) = D- 3 
(v u) (£>) = D- 2 - 



D- 1 
D- 2 



D + D 2 , 
-D 2 + D 3 , 
D~ 1 + l + D 2 + D 3 . 



(38) 



The nonzero coefficients indicate the commutation relations 



just as (35 1 claims. 



A quantum convolutional code in general consists of gen- 
erators with n qubits per frame. Therefore, we consider 
the n-qubit extension of the definitions and isomorphism 
given above. Let the delay transform D now shift a Pauli 
sequence to the right by an arbitrary integer n. Consider a 
2n-dimensional vector u(D) of binary polynomials where 



u(D) S (Z 2 (D)) 2n . Let us write u(D) as follows 



u(D) = (z(D)|x(D)), 

= {zx{D) ■■■ z n (D) | Xl (D) 

where z (D) , x (D) E (Z 2 (D)) n . Suppose 

3 

x t 1 1)> X /) '- 



*n (D) ) , 



(39) 



Define a map N : (Z 2 (D)) -> n z : 
N(u (£>)) = l\D j (Z Z1 -JX X1 -J) 

3 

jy {i ® z**-* x x *-i) ■ ■ ■ iy (/ 8 



, x x„ 



N is equivalent to the following map (up to a global phase) 

N (u (£>)) = N (ui (£>)) (7 N (u 2 (D))) 

( T®sn— 1 



where 
Suppose 



®N{u n (D))) , 
Ui (D) = ( Zi (£>) \ Xi (£>)) . (40) 



v(D) = (z'(D) \ X '(D)) 



(41) 



where v (D) € (Z 2 (£>)). The map N induces an isomor- 



phism [N] : (Z 2 (D)Y 
in d28b: 



[n z ] for the same reasons given 



[N (u (£>) + v (£>))] - [N (u (D))] [N (v (£)))] . (42) 

The isomorphism N is again useful because it allows us to 
perform binary calculations instead of Pauli calculations. 

We can again define a shifted symplectic product for the 
case of n-qubits per frame. Let denote the shifted symplectic 
product between vectors of binary polynomials: 



: (Z 2 (D)) 2n x (Z 2 (D)) 2n 



Z 2 (D) 



(43) 



It maps vectors of binary polynomials to a finite-degree and 
finite-delay binary polynomial 



(u v) (D) = («i © O (D) , 



(44) 



i=l 



where 



Ul (D) = ( Zi (D) \ Xi (£>)) , 
v i (D) = (zi(D)\x' i (D)). 

The standard inner product gives an alternative way to define 
the shifted symplectic product: 

(u © v) (D) = z (D- 1 ) ■ x' (D) - x (D- 1 ) ■ z' (D) . (45) 

Every vector u (D) £ Z 2 (D) 2n is self-time-reversal symmet- 
ric with respect to 0: 

(u u) (D) = (u u) (D- 1 ) Vu (D) E Z 2 (D) 2n . (46) 

The shifted symplectic product for vectors of binary polyno- 
mials is a binary polynomial in D. We write its coefficients 
as follows: 



(u©v)( J D)=^(u0v) l D\ 



(47) 



The coefficient (u0vL captures the commutation relations 
of two Pauli sequences for i n-qubit shifts of one of the 
sequences: 

N(u(D))D' (N(v (£>))) = 

(-l) (u0v) < D l (N (v (£>))) N (u (£>)) . 
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Example 4: We consider the case where n = 4. Consider 
the following vectors of polynomials: 



(48) 



" z(D) ' 




x(D) 




z'(D) 




x'(£>) 





1 


+ D 


D 


1 


D 







1 













1 








1 


+ £> 


1 + -D 


1 


D 



Suppose 



u(D) 
y(D) 



(z(D) |x (£>)), 
(z'(D)|x'(D)) 



(49) 



The isomorphism N maps u (D) and v (D) to the following 
Pauli sequences: 



N (u (£>)) = (• • • \IIII\ZXZI\ZZIZ\IIII\ ■■■), 
N (v (£>)) = (• • • |III/|XYXJ|JOT/X|Ii7I| • • • ) • 



(50) 



We can determine the commutation relations by inspection 
of the above Pauli sequences. N(u(D)) anticommutes with 
itself shifted by one to the left or right, N (v (D)) anticom- 
mutes with itself shifted by one to the left or right, and 
N(u(D)) anticommutes with N(v(Z))) shifted by one to 
the left. The following shifted symplectic products confirm 
the above commutation relations: 



D, 



(51) 



(u0u) (D) = D- 1 
(v©v) (D) = D- 1 
(u©v) (D) = D. 

We note two useful properties of the shifted symplectic 
product 0. Suppose / (£>) e Z 2 (D) with deg (/) > 0. Let 
us denote scalar polynomial multiplication as follows: 

(/ u)(D) =[/(£>) Ul (D) ■ 

The following identities hold. 

((/ u)0v) (£>)=/( J D- 1 )(u©v) (D), 
(u0(/ v)) (D)=f(D) (u©v) (£>). 

We also remark that 



f(D)u n (£>)]. (52) 



(53) 
(54) 



iff 



( U 0v) (D) = (v0u) (£>), 
(u0v) (D) = (u0v) (D- 1 ) 



We exploit both of the above properties in the constructions 
that follow. 

B. Yield (n-l)/n Convolutional Entanglement Distillation with 
Entanglement Assistance 

We present our first method for constructing a convolutional 
entanglement distillation protocol that uses entanglement as- 
sistance. The shifted symplectic product is a crucial component 
of our formulation. 

Suppose Alice and Bob use one generator N (u (D)) for an 
entanglement distillation protocol where 



u(D) = (z(D)|x(D)) 

= (zi(D) ■■■ z n (D) 



xi (£>) 



(D) ) 



We do not impose a commuting constraint on generator 
N (u (D)). Alice and Bob choose generator N (u (£>)) solely 
for its error-correcting capability. 

The shifted symplectic product helps to produce a com- 
muting generator from a noncommuting one. The shifted 
symplectic product of u (D) is 



(U0u)(i))=^(u0u) i D i 



(55) 



The coefficient (u u) for zero shifts is equal to zero 
because every tensor product of Pauli operators commutes with 
itself: 

(u0u) o = O. (56) 



Recall that u (D) is self-time-reversal symmetric (46 1. We 
adopt the following notation for a polynomial that includes 
the positive-index or negative-index coefficients of the shifted 
symplectic product (u0u)(D): 



(u 0u) (£>)+= £ (u©u), D\ 

ZGZ+ 

(u0u)(U)-= J2 ( U0U >. Di - 



The following identity holds: 

(u0u)(J}) + = (u0u) (D- 1 )' 
Consider the following vector of polynomials: 
a(D)= ( (u0u)(D) + | 1 ). 



(57) 
(58) 

(59) 
(60) 



Its relations under the shifted symplectic product are the same 
as u(D): 

(a a) (£>) = (u u) (£>)" + (u u) (£>)+ , 

= (u0u)(D). (61) 

The vector a (D) provides a straightforward way to make 
N (u (D)) commute with all of its shifts. We augment u (D) 
with & {D). The augmented generator u' (D) is as follows: 



u' (£>) = ( z (£>) (u©u) (D) + | x(D) 1 



(62) 



The augmented generator u' (D) has vanishing symplectic 
product because the shifted symplectic product of a (D) nulls 
the shifted symplectic product of u(D): 



(u' u') (D) = 0. 



(63) 



The augmented generator N (u' (£>)) commutes with itself for 
every shift and is therefore useful for convolutional entangle- 
ment distillation as outlined in Section [ill] 

We can construct an entanglement distillation protocol using 
an augmented generator of this form. The first n Pauli entries 
for every frame of generator N (u' (D)) correct errors. Entry 
n + 1 for every frame of N(u'(D)) makes N(u'(£>)) 
commute with every one of its shifts. The error-correcting 
properties of the code do not include errors on the last (extra) 
ebit of each frame; therefore, this ebit must be noiseless. It 
is necessary to catalyze the distillation procedure with nv 
noiseless ebits where n is the frame size and v is the constraint 
length. The distillation protocol requires this particular amount 



11 



TABLE I 

The convolutional entanglement distillation protocol for 
Example[5]corrects for a single-qubit error in every fourth 
frame. Here we list the syndromes corresponding to errors 
Xi,Yi, AND Z\ on the first qubit and to errors X2, Ya, AND Z2 
ON THE SECOND QUBIT. THE SYNDROMES ARE UNIQUE SO THAT THE 
RECEIVER CAN IDENTIFY WHICH ERROR OCCURS. 





Zi 


Ki 


x 2 


z 2 


Y 2 


1 





1 


1 





1 














1 


1 





1 


1 


1 





1 


1 





1 












because it does not correct errors and generate noiseless ebits 
until it has finished processing the first basic set of generators 
and v — 1 of its shifts. Later frames can use the noiseless 
ebits generated from previous frames. Therefore these initial 
noiseless ebits are negligible when calculating the yield. This 
construction allows us to exploit the error-correcting properties 
of an arbitrary set of Pauli matrices for a convolutional 
entanglement distillation protocol. 

We discuss the yield of such a protocol in more detail. 
Our construction employs one generator with n + 1 qubits 
per frame. The protocol generates n noiseless ebits for every 
frame. But it also consumes a noiseless ebit for every frame. 
Every frame thus produces a net of n — 1 noiseless ebits, and 
the yield of the protocol is (n — 1) /n. 

This yield of (n — l)/n is superior to the yield of an 
entanglement distillation protocol taken from the quantum 
convolutional codes of Forney et al. [20 1. Our construction 
should also give entanglement distillation protocols with su- 
perior error-correcting properties because we have no self- 
orthogonality constraint on the Paulis in the stabilizer. 

It is possible to construct an online decoding circuit for 
the generator u' (D) by the methods given in [25|. A circuit 
satisfies the noncatastrophic property if the polynomial entries 
of all of the code generators have a greatest common divisor 
that is a power of the delay operator D [25 1. The online decod- 
ing circuit for this construction obeys the noncatastrophicity 
property because the augmented generator u' (D) contains 1 
as one of its entries. 

Example 5: Suppose we have the following generator 



n (u (£>)) = (• • • \n\zz\ix\xz\zi\n\ ■■■) 



where 



u (D) = ( 1 + D 3 1 + D 2 I D 2 D 



The above generator corrects for an arbitrary single-qubit 
error in a span of eight qubits — four frames. Table [I] lists the 
unique syndromes for errors in a single frame. The generator 
anticommutes with a shift of itself by one or two to the 
left or right. The shifted symplectic product confirms these 
commutation relations: 

(u u) (D) = D + D 2 + D- 1 + D~ 2 . 
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Let us follow the prescription in ( 62 1 for augmenting generator 



Fig. 6. The above figure illustrates Bob's side of the convolutional 
entanglement distillation protocol that uses entanglement assistance. The noise 
affects the first and second of every three ebits that Bob shares with Alice. 
Every third ebit that Alice and Bob share are noiseless. The measurements 
correspond to those in Example [3] 



N (u (£))). The following polynomial 

a(Z>) = ( (u0u)(])) + I 1 ), 

= ( D + D 2 I 1 ) , (64) 

has the same commutation relations as u(D): 

(a0a)(fl) = (u0u)(fl). (65) 

We augment u (D) as follows: 

u' (D) = ( 1 + D 3 1 + D 2 D + D 2 I D 2 D 1 ) . 

The overall generator now looks as follows in the Pauli 
representation: 

N (u' (£))) = (■ ■ • \III\ZZX\IXZ\XZZ\ZII\III\ ■■■). 

The yield of a protocol using the above construction is 1/2. 
Figure [6] illustrates Bob's side of the protocol. It shows which 
of Bob's half of the ebits are noisy and noiseless, and it gives 
the measurements that Bob performs. 

C. Yield (n-m)/n Convolutional Entanglement Distillation with 
Entanglement Assistance 

The construction in the above section uses only one gener- 
ator for distillation. We generalize the above construction to 
a code with an arbitrary number of generators. We give an 
example that illustrates how to convert an arbitrary classical 
quaternary convolutional code into a convolutional entangle- 
ment distillation protocol. 



12 



Suppose we have the following m generators 
{N(u; (£>)) : 1 <i<m}, 

where 



"ui (D)' 








u 2 (£>) 




12 (D) 


X2 (D) 


u m 




_ z m (D) 


x m (D) 



(66) 



We make no assumption about the commutation relations of 
the above generators. We choose them solely for their error- 
correcting properties. 

We again utilize the shifted symplectic product to design 
a convolutional entanglement distillation protocol with mul- 
tiple generators. Let us adopt the following shorthand for 
the auto and cross shifted symplectic product of generators 
ui (£>),..., u ro (D): 



Consider the following matrix: 



(67) 
(68) 



"aip)" 




u 2 ,i ••• U m ,l 






a 2 (U) 




••• u m , 2 












Im x m 


• (69) 


_a m (D)_ 




••• u+ 







The symplectic relations of the entries (D) are the same as 
the original (D): 

(a, aj ) (D) = (m Uj) (D) Vi,j S {1, . . . , m} . 

We mention that the following matrix also has the same 
symplectic relations: 



u i 

Ul,2 







U.l,m U2 jm 

Let us rewrite d69l as follows: 







(70) 



"ax (I?) - 




r <{d) 


x',(0) 1 


a a (£>) 








a m (£>)_ 









(71) 



The above matrix provides a straightforward way to make 
the original generators commute with all of their shifts. We 



augment the generators in (66 1 by the generators a^ (D) to get 
the following m x 2 (n + m) matrix: 



U'(D)= [ 
Zl (D) 
z 2 (D) 



Z(D) | 
z[(D) 



z m (D) W m (D) 



X(Z?) ] = 

xi (D) x' x (£>) 
x 2 (£>) x' 2 (£>) 

x m (£») xJ„(D) 



(72) 



Every row of the augmented matrix U' (£>) has vanishing 
symplectic product with itself and any other row. This condi- 
tion is equivalent to the following matrix condition for shifted 
symplectic orthogonality lfl8l : 

Z(£»- 1 )X(D) T -X( J D- 1 )Z(L>) T = 0. (73) 

The construction gives a commuting set of generators for 
arbitrary shifts and thus forms a valid stabilizer. 

We can readily develop a convolutional entanglement distil- 
lation protocol using the above formulation. The generators in 
the augmented matrix U' (D) correct for errors on the first n 
ebits. The last m ebits are noiseless ebits that help to obtain a 
commuting stabilizer. It is necessary to catalyze the distillation 
protocol with (n + m)v noiseless ebits. Later frames can use 
the noiseless ebits generated from previous frames. These 
initial noiseless ebits are negligible when calculating the yield. 

We comment more on the yield of the protocol. The protocol 
requires a set of m generators with n + m Pauli entries. It 
generates n ebits for every frame. But it consumes m noiseless 
ebits per frame. The net yield of a protocol using the above 
construction is thus (n — m) /n. 

The key benefit of the above construction is that we can 
use an arbitrary set of Paulis for distilling noiseless ebits. 
This arbitrariness in the Paulis implies that we can import 
an arbitrary classical convolutional binary or quaternary code 
for use in a convolutional entanglement distillation protocol. 

It is again straightforward to develop a noncatastrophic 
decoding circuit using previous techniques ll25l . Every aug- 
mented generator in U' (D) has 1 as an entry so that it satisfies 
the property required for noncatastrophicity. 

Example 6: We begin with a classical quaternary convolu- 
tional code with entries from F4: 



(- - - |0000|1£D10|1101|0000| - - - ) 



(74) 



The above code is a convolutional version of the classical 
quaternary block code from Ref. [7|. We multiply the above 
generator by Q and cj as prescribed in Refs. 0, (20 1 and use 
the following map, 



F 4 


n 





/ 


LO 


X 


1 


Y 


Q 


Z 



(75) 



to obtain the following Pauli generators 

N (ui (D)) = (■■■ \IIII\ZXZI\ZZIZ\IIII\ ■■■), 

N (u 2 (£>)) = (• • • \IIII\XY XI\XXIX\IIII\ ■■■). (76) 

We determine binary polynomials corresponding to the above 
Pauli generators: 

ui (D) 
u 2 (D) 

l + D D 1 D 
10 



10 

l + D l + D 1 D 



(77) 



The first generator anticommutes with itself shifted by one 
to the left or right, the second generator anticommutes with 
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itself shifted by one to the left or right, and the first generator 
anticommutes with the second shifted by one to the left. 
The following shifted symplectic products confirm the above 
commutation relations: 



D- 1 

-l 



(ui0ui)(D 
(u 2 0u 2 )(L>) = D~ 
(m u 2 ) (£>) = D. 

Consider the following two generators: 



D, 
D, 



ai (D) 
a 2 (D) 



D 
D 




D 



(78) 



(79) 



Their relations under the shifted symplectic product are the 
same as those in (T78b. 



(ai0ai)(D) 
(a 2 a 2 ) (D) 
(ai a 2 ) (D) 



(u 1 ©u 1 )(D) 
(u 2 u 2 ) (D) 
(m u 2 ) (D) 



(80) 



We use the construction from ( 70 » so that we have positive 
delay operators in the augmented matrix. We augment the gen- 
erators Ui (D) and u 2 (D) to generators (D) and u 2 (D) 
respectively as follows. The augmented "Z matrix" is 



Z(D) = 



l + D 




D 
1 



D 




D 
D 




D 



(81) 



X(D) 



(82) 



(83) 



and the augmented "X matrix" is 

1 10 

l + D l + D 1 D 1 

The augmented matrix U' (D) is 

U' (D)=[ Z(D) | X(D) }. 

The first row of U' (D) is generator (D) and the second 
row is (D). The augmented generators have the following 
Pauli representation. 

N(u' x (1?)) = 

(• • • \IIIIII\ZXZIXI\ZZIZZI\IIIIII\ ■■■) , 

N(u' 2 (D)) = 

(■■■ \IIIIII\XYXIIX\XXIXZZ\IIIIII\ ■■■). 

The original block code from Ref. Q corrects for an arbi- 
trary single-qubit error. The above entanglement distillation 
protocol corrects for a single-qubit error in eight qubits — 
two frames. This error-correcting capability follows from the 
capability of the block code. The yield of a protocol using the 
above stabilizer is again 1/2. 

D. CSS-Like Construction for a Convolutional Entanglement 
Distillation Protocol 

We finally present a construction that allows us to import 
two arbitrary binary classical codes for use in a convolutional 
entanglement distillation protocol. The construction is similar 
to a CSS code because one code corrects for bit flips and the 
other corrects for phase flips. 



We could simply use the technique from the previous section 
to construct a convolutional entanglement-distillation protocol. 
We could represent both classical codes as codes over F 4 . 
We could multiply the bit-flip code by u> and the phase-flip 
code by u> and use the above map from F4 to the Paulis. We 
could then use the above method for augmentation and obtain 
a valid quantum code for entanglement distillation. But there 
is a better method that exploits the structure of a CSS code to 
minimize the number of initial catalytic noiseless ebits. 

Our algorithm below uses a Gram-Schmidt like orthogonal- 
ization procedure to minimize the number of initial noiseless 
ebits. The procedure is similar to the algorithm in [8| with 
some key differences. 

Suppose we have m generators {N (wj (D)) : 1 < i < m} 
where 





" wi(Z>) " 




" Zl (£>) 


w p (D) 




Zp [d) 


Wp+i (D) 







_ w m (D) _ 










xi (D) 



(D) 



(84) 



and each vector (D) has length 2n. The above matrix 
could come from two binary classical codes. The vectors 
zi (D),. . .,z p (D) could come from one code, and the vectors 
Xi (D),. . . ,x m _ p (D) could come from another code. The 
following orthogonality relations hold for the above vectors: 

V l<i,i<p:(w i ©w i )(D) = 0, (85) 
V p+ 1 < i',f < m : (w^ Qw r ) (D) = 0. (86) 

We exploit the above orthogonality relations in the algorithm 
below. 

We can perform a Gram-Schmidt process on the above set of 
vectors. This process orthogonalizes the vectors with respect to 
the shifted symplectic product. The procedure does not change 
the error-correcting properties of the original codes because all 
operations are linear. 

The algorithm breaks the set of vectors above into pairs. 
Each pair consists of two vectors which are symplectically 
nonorthogonal to each other, but which are symplectically 
orthogonal to all other pairs. Any remaining vectors that are 
symplectically orthogonal to all other vectors are collected 
into a separate set, which we call the set of isotropic vectors. 
This idea is similar to the decomposition of a vector space 
into an isotropic and symplectic part. We cannot label the 
decomposition as such because the shifted symplectic product 
is not a true symplectic product. 

We detail the initialization of the algorithm. Set parameters 
i = 0, c = Q, I = 0. The index i labels the total number of 
vectors processed, c gives the number of pairs, and I labels 
the number of vectors with no partner. Initialize sets U and 
V to be null: U = V = 0. U keeps track of the pairs and V 
keeps track of the vectors with no partner. 

The algorithm proceeds as follows. While i < m, let 
j > 2c + I + 2 be the smallest index for a Wj (D) for 
which (w 2c+ ; + i Wj) (D) 0. Increment I and i by one, 
add i to V, and proceed to the next round if no such 



14 



pair exists. Otherwise, swap wj (D) with w 2c +/+ 2 (D). For 
r € {2c + / + 3, . . . , to}, perform 

w r (£>) = (w 2c+;+ 2 w 2c+;+ i) (£>) w r (D) 

+ (w r w 2c+ ; +2 ) w 2c+;+ i (Z?) . 

if w r (D) has a purely z component. Perform 

w r (D) = (w 2c+i+ i w 2c+i+2 ) (D) w r (D) 

+ (w r w 2c+;+ i) (D^ 1 ) w 2c+i+2 (D) . 

if w r (D) has a purely x component. Divide every element 
in w r (D) by the greatest common factor if the GCF is not 
equal to one. Then 

(w r w 2c+i+1 ) (D) = (w r w 2c+i+2 ) (D) = 0. (87) 

Increment c by one, increment i by one, add i to U, and 
increment i by one. Proceed to the next round. 

We now give the method for augmenting the above gen- 
erators so that they form a commuting stabilizer. At the end 
of the algorithm, the sets U and V have the following sizes: 
\U\ = c and |V| = I. Let us relabel the vectors w, (D) for 
all 1 < i < 2c + I. We relabel all pairs: call the first (D) 
and call its partner (D) for all 1 < i < c. Call any vector 
without a partner u c +i (D) for all 1 < i < I. The relabeled 
vectors have the following shifted symplectic product relations 
after the Gram-Schmidt procedure: 

(u i Qv j )(D) = f i {D)5 ij v ;,je{i,...,c}, 
(m0Uj)(D) = o v i,je{i,. ..,!}, 

(v i 0v i )(D) = O V ue{l,...,c}, (88) 

where /,; (D) is an arbitrary polynomial. Let us arrange the 
above generators in a matrix as follows: 

' Ul (D) ■ 

Uc(D) 
vi (Z?) 

VcP) 

u c+ i (£>) 
u c +; (£>). 

We augment the above generators with the following matrix 
so that all vectors are orthogonal to each other: 



(89) 









O c xl 
Oixl 







"cxl 
0/xl 









Ocxl 
Oixl 



Olxc 
Olxc 

Olxc 
Icxc 
0; xc 



(90) 

The yield of a protocol using the above construction is 
(n — to) jn. Suppose we use an [n, k\] classical binary con- 
volutional code for the bit flips and an [n, fc 2 ] classical binary 



convolutional code for the phase flips. Then the convolutional 
entanglement distillation protocol has yield (k\ + fc 2 — n) jn. 

Example 7: Consider a binary classical convolutional code 
with the following parity check matrix: 



[1 + D D 1] 



(91) 



We can use the above parity check matrix to correct both bit 
and phase flip errors in an entanglement distillation protocol. 
Our initial quantum parity check matrix is 



l + D D 1 





l + D D 1 



(92) 



The shifted symplectic product for the first and second row is 
D^ 1 + D. We therefore augment the above matrix as follows: 



l+D 







D 




D' 



D 












l + D D 1 1 

(93) 

The above matrix gives a valid stabilizer for use in an 
entanglement distillation protocol. The yield of a protocol 
using the above stabilizer is 1/3. 

V. Conclusion and Current Work 

We constructed a theory of convolutional entanglement 
distillation. The entanglement-assisted protocol assumes that 
the sender and receiver have some noiseless ebits to use as 
a catalyst for distilling more ebits. These protocols have the 
benefit of lifting the self-orthogonality constraint. Thus we 
are able to import an arbitrary classical convolutional code 
for use in a convolutional entanglement distillation protocol. 
The error-correcting properties and rate of the classical code 
translate to the quantum case. Brun, Devetak, and Hsieh first 
constructed the method for importing an arbitrary classical 
block code in their work on entanglement-assisted codes 
[8 |, [7|. Our theory of convolutional entanglement distillation 
paves the way for exploring protocols that approach the 
optimal distillable entanglement by using the well-established 
theory of classical convolutional coding. 

Convolutional entanglement distillation protocols also hold 
some key advantages over block entanglement distillation 
protocols. They have a higher yield of ebits, lower decoding 
complexity, and are an online protocol that a sender and 
receiver can employ as they acquire more noisy ebits. 

We suggest that convolutional entanglement distillation pro- 
tocols may bear some advantages for distillation of a secret 
key because of the strong connection between distillation and 
privacy fl4l . We are currently investigating whether convo- 
lutional entanglement distillation protocols can improve the 
secret key rate for quantum key distribution. 

The authors thank Igor Devetak and Zhicheng Luo for useful 
discussions and thank Saikat Guha for locating a copy of 
Jonsson's master's thesis. MMW acknowledges support from 
NSF Grant 0545845, and HK and TAB acknowledge support 
from NSF Grant CCF-0448658. All authors are grateful to the 
Hearne Insitute for Theoretical Physics for hosting MMW as 
a visiting researcher. 
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VI. Appendix 

Example 8: We present an example of an entanglement- 
assisted code that corrects an arbitrary single-qubit error Q. 
Suppose the sender wants to use the quantum error-correcting 
properties of the following nonabelian subgroup of II 4 : 



Z X Z I 
Z Z I Z 
X Y X I 
XXIX 



(94) 



The first two generators anticommute. We obtain a modified 
third generator by multiplying the third generator by the 
second. We then multiply the last generator by the first, second, 
and modified third generators. The error-correcting properties 
of the generators are invariant under these operations. The 
modified generators are as follows: 



91 

92 
53 
94 



Z X Z I 

Z Z I Z 

Y X X Z 

Z Y Y X 



(95) 



The above set of generators have the commutation relations 
given by the fundamental theorem of symplectic geometry: 

{51,52} = [ffi,53] = [51,54] , 

= [52,53] = [52,54] = [53,54] = 0. 

The above set of generators is unitarily equivalent to the 
following canonical generators: 



XIII 
Z I I I 
I Z I I 
I I Z I 



(96) 



We can add one ebit to resolve the anticommutativity of the 
first two generators: 



XIII 
Z I I I 
I Z I I 
I I Z I 



X 

z 
I 
I 



(97) 



The following state is an eigenstate of the above stabilizer 



Y B m A \^) A 



(98) 



where is a qubit that the sender wants to encode. The 

encoding unitary then rotates the generators in ( |97] l to the 
following set of globally commuting generators: 



Z X Z I 

Z Z I Z 

Y X X Z 

Z Y Y X 



X 

z 
I 
I 



(99) 



The receiver measures the above generators upon receipt of 
all qubits to detect and correct errors. 



A. Encoding Algorithm 

We continue with the previous example. We detail an 
algorithm for determining an encoding circuit and the opti- 
mal number of ebits for the entanglement-assisted code. The 



operators in ( 94 1 have the following representation as a binary 
matrix: 



H 



10 10 
110 1 
10 




10 

1110 
110 1 



(100) 



Call the matrix to the left of the vertical bar the "Z matrix" 
and the matrix to the right of the vertical bar the "X matrix." 

The algorithm consists of row and column operations on the 
above matrix. Row operations do not affect the error-correcting 
properties of the code but are crucial for arriving at the optimal 
decomposition from the fundamental theorem of symplectic 
geometry. The operations available for manipulating columns 
of the above matrix are Clifford operations |4). Clifford 
operations preserve the Pauli group II™ under conjugation. The 
CNOT gate, the Hadamard gate, and the Phase gate generate 
the Clifford group. A CNOT gate from qubit i to qubit j adds 
column i to column j in the X matrix and adds column j to 
column i in the Z matrix. A Hadamard gate on qubit i swaps 
column i in the Z matrix with column i in the X matrix 
and vice versa. A phase gate on qubit i adds column i in the 
X matrix to column i in the Z matrix. Three CNOT gates 
implement a qubit swap operation ifTBI . The effect of a swap 
on qubits i and j is to swap columns i and j in both the X 
and Z matrix. 

The algorithm begins by computing the symplectic product 
between the first row and all other rows. We emphasize 
that the symplectic product here is the standard symplectic 
product. Leave the matrix as it is if the first row is not 
symplectically orthogonal to the second row or if the first 
row is symplectically orthogonal to all other rows. Otherwise, 
swap the second row with the first available row that is not 
symplectically orthogonal to the first row. In our example, the 
first row is not symplectically orthogonal to the second so we 
leave all rows as they are. 

Arrange the first row so that the top left entry in the X 
matrix is one. A CNOT, swap, Hadamard, or combinations 
of these operations can achieve this result. We can have this 
result in our example by swapping qubits one and two. The 
matrix becomes 



110 
110 1 
10 




10 

1110 
110 1 



(101) 



Perform CNOTs to clear the entries in the X matrix in 
the top row to the right of the leftmost entry. These entries 
are already zero in this example so we need not do anything. 
Proceed to the clear the entries in the first row of the Z matrix. 
Perform a phase gate to clear the leftmost entry in the first row 
of the Z matrix if it is equal to one. It is equal to zero in this 
case so we need not do anything. We then use Hadamards 
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and CNOTs to clear the other entries in the first row of the Z 
matrix. 

We perform the above operations for our example. Perform 
a Hadamard on qubits two and three. The matrix becomes 




10 1 
1110 
10 



1110 
10 
10 
10 1 



(102) 



Perform a CNOT from qubit one to qubit two and from qubit 
one to qubit three. The matrix becomes 




10 1 
1110 
110 



10 
10 
1110 

1111 



(103) 



The first row is complete. We now proceed to clear the entries 
in the second row. Perform a Hadamard on qubits one and 
four. The matrix becomes 



10 

1110 
110 1 




110 1 
1110 
1110 



(104) 



Perform a CNOT from qubit one to qubit two and from qubit 
one to qubit four. The matrix becomes 



10 

110 
110 1 





10 

10 11 

10 11 



(105) 



The first two rows are now complete. They need one ebit to 
compensate for their anticommutativity or their nonorthogo- 
nality with respect to the symplectic product. 

Now we perform a "Gram-Schmidt orthogonalization" with 
respect to the symplectic product. Add row 1 to any other row 
that has one as the leftmost entry in its Z matrix. Add row 
two to any other row that has one as the leftmost entry in its 
X matrix. For our example, we add row one to row four and 
we add row two to rows three and four. The matrix becomes 



10 

110 
10 1 





10 

11 

11 



(106) 



The first two rows are now symplectically orthogonal to 
all other rows per the fundamental theorem of symplectic 
geometry. 

We proceed with the same algorithm on the next two rows. 
The next two rows are symplectically orthogonal to each other 
so we can deal with them individually. Perform a Hadamard 
on qubit two. The matrix becomes 



10 



10 

1 




10 
111 
111 



(107) 



i BA 



\Q) A {W 



P 



lor -\h\ | © iffffi 

i i\A 



-0- 



H 



H 



© — © 



H 



Q-H 



H 



Fig. 7. Encoding circuit for the entanglement-assisted code from |7|. The 
"H" gate is a Hadamard gate and the "P" gate is a phase gate. 



Perform a CNOT from qubit two to qubit three and from qubit 
two to qubit four. The matrix becomes 





1 














" 










1 
















1 1 





1 













1 1 





1 








a phase g 


ate on qubit two: 










1 














" 










1 
















1 





1 













1 





1 









(108) 



(109) 



Perform a Hadamard on qubit three followed by a CNOT from 
qubit two to qubit three: 



10 





1 




10 
10 
110 



(HO) 



Add row three to row four and perform a Hadamard on qubit 
two: 



10 



10 

1 





10 



10 



(111) 



Perform a Hadamard on qubit four followed by a CNOT from 
qubit three to qubit four. End by performing a Hadamard on 
qubit three: 



10 

10 
10 





10 







(112) 



The above matrix now corresponds to the canonical Paulis 
(|96]>. Adding one half of an ebit to the receiver's side gives 



the canonical stabilizer (97 1 whose simultaneous +l-eigenstate 
is (|98). 

Figure [7] gives the encoding circuit corresponding to the 
above operations. The above operations in reverse order take 
the canonical stabilizer dWl to the encoded stabilizer d99b. 
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